Home / bulletins

MS15-040 - Important: Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3045711) - Version: 1.0

Posted on 15 April 2015

There is an newer version: MS15-040 - Version: 1.0

Important

Severity Rating: Important
Revision Note: V1.0 (April 14, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Active Directory Federation Services (AD FS). The vulnerability could allow information disclosure if a user leaves their browser open after logging off from an application, and an attacker reopens the application in the browser immediately after the user has logged off.

Link

Other versions

• MS15-040 - Version: 1.0
• MS15-040 - Version: 1.0

 

TOP